To że svchost zużywa w danym momencie 50 % to nic nie oznacza. Svchost głównie jest odpowiedzialny za ładowanie wspólne bibliotek dll dla innych aplikacji które są w użyciu.
Mało ogólnie też w systemie aktywnych usług to tu nie ma.
Do notatnika wklej i zapisz jako
fixlist.txt
Kod:
CloseProcesses:
CreateRestorePoint:
HKLM-x32\...\Run: [] => [X]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
DeleteKey: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes
DeleteKey: HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes
DeleteKey: HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll No File
FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll No File
FF Plugin HKU\S-1-5-21-1133691320-1713661168-1750980009-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll No File
FF HKLM\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2014-02-21]
FF HKLM-x32\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\AVG PC TuneUp 2014\TuneUpUtilitiesDriver64.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
C:\Program Files (x86)\Windows Loader
C:\ProgramData\McAfee
C:\ProgramData\TEMP
DeleteKey: HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Akamai NetSession Interface
Task: {38701524-7CD7-413F-93CA-92B262876674} - System32\Tasks\SmartDefrag3_Update => C:\Program Files (x86)\IObit\Smart Defrag 3\AutoUpdate.exe [2014-07-23] (IObit)
Task: {4B6741D2-327C-4E46-BDBA-003630942313} - System32\Tasks\Core Temp Autostart NASZ => C:\CoreTemp64\Core Temp.exe
Task: {5B594A14-9473-4FAA-A8E1-A1A9D4C86FD3} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)
Task: {5EB685D8-8036-4746-B869-86B2C8D122B8} - System32\Tasks\{7D269896-FCFB-4805-95FD-E86C55409488} => pcalua.exe -a "C:\Users\NASZ\Downloads\FSX md 11\PMDG MD-11\PMDG_MD11_FSX_Setup.exe" -d "C:\Users\NASZ\Downloads\FSX md 11\PMDG MD-11"
Task: {7D6B4928-78E9-48D6-9B6E-FEFBFB53F181} - System32\Tasks\e-pity2015_styczen => C:\Program Files (x86)\e-file\e-pity2014\Assets\signxml.exe
Task: {D18FCF79-B5B8-457C-AA6D-35E67C6897E6} - System32\Tasks\{BE3BA8D5-C389-4EAE-8E1B-95856E1226A7} => pcalua.exe -a C:\Windows\iun6002.exe -c "d:\gry\Microsoft Games\Flight Simulator 9\ATR_72500.ini"
Task: {FBF5E1F2-C6BE-4077-BE3F-8CFAC40401D4} - System32\Tasks\e-pity2015_kwiecien => C:\Program Files (x86)\e-file\e-pity2014\Assets\signxml.exe
AlternateDataStreams: C:\ProgramData\TEMP:1CE11B51
AlternateDataStreams: C:\ProgramData\TEMP:74603393
CMD: netsh advfirewall reset
Hosts:
EmptyTemp:
Zapisany skrypt umieść obok ściągniętego programu
FRST
Następnie w programie kliknij
Fix,po wykonaniu pokaż raport z tego działania.
Odinstaluj:
Internet Download Manager
Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
Java 8 Update 25 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418025F0}) (Version: 8.0.250 - Oracle Corporation)
Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)
Mozilla Firefox 38.0.5 (zaktualizuj)
Odinstaluj za pomocą fixa
[Aby zobaczyć linki, zarejestruj się tutaj]
AVG PC TuneUp 2014 (pl-PL) (x32 Version: 14.0.1001.215 - AVG) Hidden
AVG PC TuneUp 2014 (x32 Version: 14.0.1001.215 - AVG) Hidden
Wybierz tryb nieautomatyczny i na liście deinstalacji wskaż wyżej wymienione oprogramowanie.
